
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136392e302f32342d3234203d3e20323633383333.roa
File: 3133382e3235352e3136392e302f32342d3234203d3e20323633383333.roa (raw, json)
Hash identifier: 9L4yhzyzZ7hj44UcmPgo8MAPpNvEB/u5MrBbuk+C7gs=
Subject key identifier: 2D:0F:04:FA:59:64:AE:F2:37:AB:6D:54:27:3D:91:3D:D4:10:3D:F2
Certificate issuer: /CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
Certificate serial: 3A7D529DD3B79A042A06F25925877608D2D6540C
Authority key identifier: 8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136392e302f32342d3234203d3e20323633383333.roa
Signing time: Fri 06 Mar 2026 11:33:07 +0000
ROA not before: Fri 06 Mar 2026 11:28:07 +0000
ROA not after: Fri 05 Mar 2027 11:33:07 +0000
asID: 263833
IP address blocks: 138.255.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl
rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:7d:52:9d:d3:b7:9a:04:2a:06:f2:59:25:87:76:08:d2:d6:54:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
Validity
Not Before: Mar 6 11:28:07 2026 GMT
Not After : Mar 5 11:33:07 2027 GMT
Subject: CN=2D0F04FA5964AEF237AB6D54273D913DD4103DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:63:c3:32:2f:5e:94:06:0f:6a:99:6e:f5:
52:33:49:a2:16:6a:04:80:40:fb:25:20:5d:5f:4f:
e2:20:aa:7b:bc:c6:f4:1d:23:76:69:e7:76:fe:ae:
ac:5c:02:7c:4b:9f:a3:13:f0:0e:31:d1:82:bd:49:
de:7f:b7:e5:8e:62:fc:02:85:7b:ee:77:2d:20:d9:
73:4f:83:fb:eb:02:4a:3f:a0:70:95:a5:bc:51:48:
19:53:49:a1:12:67:52:9d:e9:f9:24:34:c7:f3:bd:
30:52:ec:1e:11:93:48:4b:87:36:ff:12:fa:87:cd:
0f:94:f2:0e:dc:49:65:bc:ff:4a:3e:fa:5f:b4:94:
bc:39:b0:9e:06:40:b7:d6:e3:d7:b9:8e:5c:a5:b9:
14:c3:b4:ff:53:1c:02:67:d9:b7:31:fb:05:25:ca:
1f:a1:d3:87:80:c9:a5:7c:22:85:6f:58:73:d6:c0:
3e:49:40:a3:3f:a4:d1:d3:e7:e2:2f:75:89:80:f4:
36:08:a4:fb:a4:ed:a0:9c:76:6d:45:c6:8f:15:a3:
b3:a3:4d:ec:16:6c:9a:79:f9:4e:dc:1d:82:a2:0d:
b0:77:ba:c0:7c:6a:fc:65:b8:9a:82:22:ec:35:20:
c9:c3:60:30:6b:ab:74:73:39:77:64:86:f0:4b:c6:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0F:04:FA:59:64:AE:F2:37:AB:6D:54:27:3D:91:3D:D4:10:3D:F2
X509v3 Authority Key Identifier:
keyid:8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136392e302f32342d3234203d3e20323633383333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.169.0/24
Signature Algorithm: sha256WithRSAEncryption
52:75:f7:6b:e2:af:5f:da:32:a5:88:16:82:0e:11:c5:89:8b:
2d:ef:da:58:2d:c8:34:65:94:9a:9a:77:2e:14:74:16:6f:2e:
fb:e4:cb:21:b7:f3:fc:26:af:1e:79:52:2d:ce:b8:f4:98:59:
ce:50:b4:3c:7f:3b:a9:b2:a1:13:5e:c5:e1:ea:11:b7:f3:30:
19:79:54:9d:d0:fc:fc:3c:37:e8:82:a0:49:34:b5:cd:76:be:
b0:6f:28:a6:17:f0:e4:eb:64:cf:c5:60:21:12:70:ba:e5:c0:
aa:2e:f2:ea:62:b7:50:4b:87:ef:8a:e7:b6:df:07:30:69:82:
fb:bd:de:e1:22:01:80:6e:53:94:cf:3b:63:31:b6:fb:2f:8d:
d5:cd:a7:29:3e:c1:6b:f3:35:0a:36:0e:89:78:8b:e3:6f:8f:
26:e9:de:63:ee:6b:7c:c4:e1:16:d9:ff:0d:7a:bf:11:c5:c5:
40:09:9d:89:a0:46:f9:97:2e:c2:d9:38:bf:f7:86:f9:f5:87:
27:b6:f6:9b:4e:f2:d4:08:b4:73:38:6e:5e:bd:25:a6:9d:e7:
db:8d:09:9c:18:cd:eb:9f:6f:31:71:38:77:a2:33:01:ee:1d:
c0:a1:68:7b:77:f0:2e:fb:66:08:09:0c:a5:7b:96:5d:34:56:
91:d7:f4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:57:09 2026 by rpki-client